CVE-2024-4226

CVE-2024-4226 affects Octopus Server; a user with no permissions could view all users, roles, and permissions in certain versions. The issue arises from behavior allowing visibility of identity/authorization data to unauthenticated-permissioned accounts. Connected documents corroborate this throu...

CVE-2023-4226

creationtimestamp| type| source ---|---|--- 2023-12-17 16:42:30+00:00| seen| https://t.me/ctinow/155635 2025-05-02 05:00:06+00:00| published-proof-of-concept| Telegram/ZWoQFBrRezMSqUe81B5gfpfMTAS61xmT1C81krZ0UDhy-4...

CVE-2023-4226 Chamilo LMS File Upload Functionality Remote Code Execution

Unrestricted file upload in /main/inc/ajax/work.ajax.php in Chamilo LMS = v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files...

CVE-2023-4226

CVE-2023-4226 affects Chamilo LMS = 1.11.26 mitigates the issue. The available connected documents provide concrete details on affected location, authentication level, and remediation: upgrade to the patched release, or implement input/file validation and server hardening as described in advisori...

CVE-2022-4226

CVE-2022-4226 affects the WordPress plugin Simple Basic Contact Form prior to version 20221201. The vulnerability arises because the plugin does not sanitize or escape certain settings, enabling Stored XSS where high-privilege users (e.g., admins) could execute scripts, even if unfiltered_html is...

CVE-2021-4226 RSFirewall < 1.1.25 - IP Block Bypass

RSFirewall tries to identify the original IP address by looking at different HTTP headers. A bypass is possible due to the way it is implemented...

CVE-2021-4226

The CVE-2021-4226 entry concerns the WordPress RSFirewall! plugin where the component attempts to determine the client’s original IP by inspecting multiple HTTP headers. The vulnerability is a bypass due to the implementation, allowing circumvention of IP-based controls (as described in multiple ...

CVE-2021-4226 RSFirewall < 1.1.25 - IP Block Bypass

RSFirewall tries to identify the original IP address by looking at different HTTP headers. A bypass is possible due to the way it is implemented...

MSC-2022-4226

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...

Oracle Linux 8 : grafana (ELSA-2021-4226)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-4226 advisory. - resolve CVE-2021-39226 - rebuild to resolve CVE-2021-34558 Tenable has extracted the preceding description block directly from the Oracle Linux...

CentOS 8 : grafana (CESA-2021:4226)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4226 advisory. - grafana: snapshot feature allow an unauthenticated remote attacker to trigger a DoS via a remote API call CVE-2021-27358 - golang: crypto/elliptic:...

RHEL 8 : grafana (RHSA-2021:4226)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4226 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. The following packages have be...

Joomla 1.6.x < 3.9.25 Multiple Vulnerabilities (5834-joomla-3-9-25)

According to its self-reported version, the instance of Joomla! running on the remote web server is 1.6.x prior to 3.9.25. It is, therefore, affected by multiple vulnerabilities. - An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand function within the process of...

CVE-2021-23127

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of an insufficient length for the 2FA secret accoring to RFC 4226 of 10 bytes vs 20 bytes...

CVE-2021-23127

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of an insufficient length for the 2FA secret accoring to RFC 4226 of 10 bytes vs 20 bytes...

CVE-2021-23127: Undefined Security Weakness

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of an insufficient length for the 2FA secret accoring to RFC 4226 of 10 bytes vs 20 bytes...

[20210301] - Core - Insecure randomness within 2FA secret generation

Usage of the insecure rand function within the process of generating the 2FA secret.Usage of an insufficient length for the 2FA secret accoring to RFC 4226 of 10 bytes vs 20 bytes...

CVE-2020-4226

IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 175207...

CVE-2013-4226

creationtimestamp| type| source ---|---|--- 2020-02-18 22:36:23+00:00| seen| https://t.me/cibsecurity/9909...

CVE-2013-4226

The CVE-2013-4226 entry concerns the Drupal Authenticated User Page Caching (authcache) module. Affected component: authcache 7.x-1.x prior to 7.x-1.5. Root cause: the module does not properly restrict access to cached pages, enabling remote attackers with the same role-combination as the superus...